Building a springboard machine to infiltrate the intranet
The following is the content related to the construction of the springboard machine and the infiltration of the intranet: ** 1. Basic Principles and Network Topologies ** 1. ** Network Topologies ** - When infiltrating the internal network, the network's structure was an important foundation. For example, when the CS (Cobalt Strike) console was deployed on a public network VPS (Virtual Private Server), the intranet springboard machine could connect to both the public network and the intranet at the same time, while the lost host could only connect to the springboard machine and could not access the public network. 2. ** Position of springboard machine ** - The springboard machine played the role of an intermediary in the infiltration of the intranet. For the lost host that could only be connected to the intranet springboard machine, the CS client on it had to be forwarded online through the port of the springboard machine. ** 2. Port Forwarding of the Jumping Board Machine (Take the Jumping Board Machine of the Linux-based system as an example)** 1. ** Tools and installation ** - You can use rinetd for port forward. pkgs.org/search/? installation method can be found at: q = rinetd query. - After installation, edit the/etc/rinetd.conf file to set the port forward rules. For example, if you want to forward traffic from any IP address (0.0.0.0) to the local monitoring port (such as 8444) to the destination IP (such as 39.*.*.*) can be set in the file as 0.0.0.0 8444 39.*.*.* 8444。 2. ** Port Forwarding Running ** - After saving the settings, use the command rinetd - c /etc/rinetd. conf. In order to test whether the port forward is successful, you can open a web service on the destination port (such as port 8444 of the vps) and access port 8444 of the springboard machine from the lost host. If you can successfully access the vps web service, the port forward is successful. ** 3. Set up a private network forward platform (after controlling a host)** 1. ** Tool Usage ** - After successfully controlling a host in a network, since the other hosts in the network could not be accessed, an agent could be built on the springboard machine to access other hosts in the network. portfwd was a powerful port forward tool that supported both IP, IP, and IP. It was also built into Meterpreter. ** 4. Security and access control ** 1. ** Safety Protection of the Springboard Machine ** - The springboard machine system could ensure the safety of data transmission and the convenience of system management through the multi-layer protection of the firewall, the fortress system, and the workstation. - The security of data transmission between the local computer and the fortress system was ensured through the use of the Hypertext Packet Broker, and the real IP address was concealed. - When connecting to a remote server, only the IP address of the fortress system could be seen. The restriction allowed only the IP address of the fortress system to connect to prevent unauthorized login to the server. - The fortress system could regularly clean up server logs and connection records to ensure operational security and privacy. - By enabling strict access control on the fortress system, all connection records only showed the agent's IP address, protecting user identity and behavior privacy. - The Fortress System supported binding domain names and using tools such as CDA or Pagoda to limit access rights. Only specific regions or whitelisted IPs were allowed to access, improving the control and security of network access. While watching the Olympics, you can also read the wonderful novels related to the Olympics!
Building a springboard
If it was a zinc-coated steel springboard used in construction: 1. ** Construction requirements **: - Galvanized steel springboards shall be set up according to the construction requirements. The height of one set up shall not exceed two steps above the adjacent wall. - After each step of the steel springboard, the step distance, vertical distance, horizontal distance and the straightness of the pole should be corrected according to the regulations. 2. ** Safety compliance **: - Galvanized steel springboards must be set up in accordance with relevant safety regulations. The method of using steel springboards to establish steel springboard lifting points must have sufficient strength and embedded steel rings or use wall bolts safely. - During repeated use, the steel frame should be carefully inspected. If it is partially broken or deformed, it must be repaired before use. - Construction personnel should participate in professional training to ensure safety. 3. ** Material and processing quality **: - No matter what type of zinc-coated steel springboard was set up, the materials and processing quality of the zinc-coated steel springboard must meet the specified requirements. It was forbidden to use unqualified materials to set up the zinc-coated steel springboard to prevent accidents. 4. ** For the higher-ups **: - For a high-rise zinc-coated steel springboard with a height of more than 15 meters, there must be a design, calculation, detailed drawing, installation plan, approval by the superior technical director, and written safety technical clarification before it could be erected. 5. [Daily maintenance]: - The use of the zinc-plated steel springboard should also pay attention to the usual maintenance inspection. Once it is damaged, it should be replaced in time and cannot be used. If it was a simple Bastion Host (similar to a springboard machine): 1. The Bastion Host needed a public IP and a private IP. The private IP was used to communicate with other machines in the computer room. The public IP was used to log in from the outside. Only after logging in to the Bastion Host through the public IP could one access the internal network machine. 2. The first thing to do when building a Bastion Host was to restrict the ports, leaving a port for remote login and sealing the other ports. While watching the Olympics, you can also read the wonderful novels related to the Olympics!
What is the springboard machine for?
What is a windows springboard machine?
The springboard machine was generally used as a transit station between different networks. For example, in a network environment, the firewall only gave the user the permission to access one server. The user could not access other hosts in the local area network, but the server that the user could access had the permission to access other hosts, so this server could be used as a springboard for the network (sometimes called a pre-processor). In the Windows system, the built-in IP Helper service had a port forward function. This function could be used as a springboard to access the services of other hosts. You can run services. sco to check if the IP Helper service is started, because the port forward of Windows is provided by this service. While watching the Olympics, you can also read the wonderful novels related to the Olympics!
Springboard Machine Construction Guide
The following is a tutorial for building a springboard machine: * * 1. System environment preparation (CentOS as an example)** 1. * * Shut down the defense mechanism ** - Execution order: - `setenforce 0` - Use `sed-i '7s/enforcing/disabled/'/etc/selinux/configuration` to modify the configuration file. - `systemvl stop firewall` Stop firewall service - `systemvl disable firewall` prevents the firewall from starting up automatically. 2. * * Modifies character set (to prevent input/output error)** - Execution order: - `localedef -c -f UTF - 8 -i zh_CN zh_CN.UTF - 8` - `export LC_ALL = zh_CN.UTF - 8` - Write `LANG ="zh_GN. UTF-8" into the``/etc/locale.conf `file. 3. * * Installs the dependent package ** - Execution order: - `yum -y install epel - release` - `yum -y update` - `yum -y install git python - pip mysql - devel gcc automake autoconf python - devel vim sshpass lrzsz readline - devel` * * 2. Installs Jumpserver (Jumpserver 3.0 as an example)** 1. * * Unzip the installation package ** - Assuming that the installation package is `jumpserver 3.0.tar.gz`, execute the command `tar-zvxf jumpserver 3.0.tar.gz-C/usr/Src`, and then enter the unzipped `CD jumpserver` and the `install/`. 2. * * Use Quick Installment Script ** - Execute the command `pip install--upgrade pip-r requirements.txt-https://pypi.tuna.tsinghua.edu.conn/simple`. After that, you can use `pip freeze` to check all the installed software. * * Third, install and start MariaDB (Database-related configuration)** 1. * * Installs and starts ** - Execute the command `yum-y install mariadb mariadb-server` - Start service: `systemvl start mariadb` - Set the boot-up function: `systemvl enable mariadb` 2. * * Simple configuration of MariaDB (password setting)** - Execute `mysql-secure-installation` and follow the prompts: Enter directly, enter `Y-enter to set the password (follow the prompts), enter whether to delete anonymous users, enter whether to prohibit root remote login (set according to the situation), enter whether to delete the test database, enter whether to reload the permission table. 3. * * Test login ** - Assuming the password is 123456, execute the command `mysql-uroot-p123456`. 4. * * Configures the character set of MariaDB ** - For the `/etc/my.cnf `file (added under the`(mysqld)`tag): - Back up `ep/etc/my. ckf {,. bak}` first. - Added content: - `init_connect =‘SET collation_connection = utf8_unicode_ci’` - `init_connect =‘SET NAMES utf8’` - `character - set - server = utf8` - `collation - server = utf8_unicode_ci` - `skip - character - set - client - handshake` - For the `/etc/my.cnf.d/client.cnf `file (add in`(client)`): - Back up `CP/etc/my.cnf.d/client.cnf {,. bak}` first - Add `default-character-set = utf8`. - For the configuration file `/etc/my.cnf. d/mysql-clients.cnf `(add relevant content in`(mysql)`). * * 4. User settings of the springboard console (CentOS6.7 as an example)** 1. * * Create a springboard machine user and group ** - First, create a user and a group. For example, create a `tiaobanji` user and a `tiaobanji` group. Then, execute the command: - `useradd tiaobanji` - `username-s/sbin/nologin tiaobanji`(For security reasons, the user is not allowed to log into the system). - You can also create a springboard machine user through the script that comes with the project (such as `add_user. sh `) and perform operations such as initialisation. In addition, if it involves connecting to the springboard machine through Pagant (PuTTY authentication agent): 1. * * Prerequisite ** - Make sure that Pagant is installed with the PuTTY suite and that you have saved at least one Shh key on your local computer. 2. * * Add the secret key to Pagant ** - Start Pagant from the PuTTY folder. By default, Pagant will be minimized in the system tray. - Right-click its icon and select `Add Key` or `View Key` to open the `Pagant Key List` window, where you can view, add, and delete keys. When adding the key, select a file with the extension `. ppk`. If the key is password-protected, you need to enter the password. 3. * * Landing the springboard machine through Putty ** - These keys will be available when you connect to any server during a PuTTY session. Enter the host name or IP address, as well as the ssh user, and select the "Allow agent shipping" option under the SSH-Auth folder on the left. This option will allow the ssh client on the springboard to communicate with the local ssh-agent of the management terminal to complete the subsequent operations.> While watching the Olympics, you can also read the wonderful novels related to the Olympics!
How much is a network springboard machine?
The price of the springboard machine varied. For example, there was a springboard machine package that included a 4C/8G/40G-JumpServer for 1080 RMB, and there was also a springboard machine that only cost 2999 RMB to enjoy the relevant security and management protection functions. However, the price of the springboard machine varied according to the configuration, function, and service content. While watching the Olympics, you can also read the wonderful novels related to the Olympics!
How much does it cost to build a springboard machine?
The price of only one springboard machine was 2999 yuan. There was no more information about the price of springboard machine construction, so it was impossible to determine the general price of springboard machine construction. While watching the Olympics, you can also read the wonderful novels related to the Olympics!
The role of springboard
The springboard had many uses: 1. In terms of the Internet, the springboard could be used to hide one's address and prevent others from finding one's location. 2. In the development of life, it was similar to a supportive factor that played an important role in the journey to success. For example, a father's job could provide a window for the child to look out at the outside world and become a springboard for the child's life. 3. In the field of sports, such as the Korean springboard, there was a pivot point in the middle of the springboard. Two people stood at both ends and took turns to jump. The rebound force of the springboard could bounce people into the air, which could enhance the jumping power of the legs, exercise the ability to control the body in the air, improve the stability of the vestibal function, and build the body. There were many skills and postures required for springboard diving. There were two types of competitions: one was to draw the line and the other was to compare performance skills. 4. In certain situations, such as a dog's long mouth, it could act as a buffer when eating and could be regarded as a " springboard " to prevent food from falling. 5. On the ship's side, the bow springboard was located at the front of the ro-ro ship and could act as a waterproof door when it was closed. While watching the Olympics, you can also read the wonderful novels related to the Olympics!
The width of the springboard
If it was a three-meter springboard (one of the diving events in the Olympic Games and the World Championship), the width of the springboard was 0.5 meters according to the regulations of the International Swimming Federation. If it was a steel springboard, the national standard width was 250mm, and the non-standard steel springboard width was 210mm and 240 mm. While watching the Olympics, you can also read the wonderful novels related to the Olympics!
Picture of springboard cartoon
How long is the springboard?
Different types of springboards had different lengths. According to the rules of the International Swimming Federation, the 3m springboard in the Olympic Games and the World Championships should be at least 4.8 meters long, which was 480cm. The Korean springboard was generally 5.5 meters long, which was 550cm. The length of the outer size of the zinc-plated steel springboard was not limited. While watching the Olympics, you can also read the wonderful novels related to the Olympics!